Privacy policy

Deliverists.io sp. z o.o., registered in Poland, KRS 0001025168, NIP 7812048495, seat at ul. Polska 15, 60-595 Poznań, is the data controller for Daily Champ. Write to gs@deliverists.io for anything on this page.

• Your email address, and a name and time zone if you set them.
• What you put in: areas, cards, tasks, steps, notes, the worklog, timers, day entries and templates.
• Who you share with, who is in your workspace, and who you invited.
• What you ask the coach and what it answers.
• If you turn on push reminders: the address your browser gives us for them.
• Device tokens and connected agents: a label, the agent's name, and a hash of the token. We cannot read the token back.
• If you buy Pro: that you did, until when, and Stripe's customer id for you. Card numbers never reach us.
• Server logs: the address a request came from, what it asked for and when. Emails and tokens are stripped before they are written.

To run the service you signed up for: sign you in with a code sent to your email, keep your tasks, share what you share, send the reminders you turned on, and answer the coach when you ask it. This is performance of a contract.

To keep the service safe: rate limits, sign-in attempt counts and server logs. This is our legitimate interest, and yours.

To bill Pro and keep the records tax law requires of us. This is a contract and a legal obligation.

Nothing else. No marketing email, no analytics, no advertising, no profiling, and we never sell or rent what you give us.

Daily Champ runs on servers we rent from OVH in the European Union, and its database stays there.

Four companies do one job each for us. Brevo delivers our email. Stripe takes payment for Pro and holds your card details; we see only that you paid. OVH provides the machines. Ollama runs the coach model: when you ask the coach, the text of your question and the entry it is about is sent to Ollama's cloud service, which is outside the European Union. That is the only transfer out of the EU, it happens only when you ask the coach, and it is not used to train anything. None of these companies may use your data for anything but the job we hand them.

Nobody, until you say so. Sharing a task or a card shows it to the person you named. Inviting someone into your workspace lets them be named, not read. A share link shows that one task to anyone holding the link, without signing in, until you revoke it.

• Your account and everything in it: until you ask us to delete it.
• A sign-in code: 15 minutes.
• A signed-in session: 30 days, then you sign in again.
• Server logs: 30 days.
• Payment records: as long as Polish tax law requires.

You can ask to see what we hold about you, have it corrected, have a copy, or have it deleted. Email us and we do it within 30 days; deletion takes everything you made with it, except the payment records the law makes us keep. You can also complain to the Polish data protection authority, the UODO, at uodo.gov.pl.

Two, both needed to keep you signed in, and nothing that tracks you. The cookies page lists them.

If this policy changes in a way that matters, we tell you by email or in the app first. Questions: gs@deliverists.io.